CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ220

Risk Optimization

An enterprise has chosen to develop its first mobile application. The IT director is concerned about this initiative's potential impact. Which of the following is the MOST important input for managing the risk related to this initiative?

  • A Business requirements
  • B IT risk scorecard
  • C Enterprise risk appetite
  • D Enterprise architecture (EA)
Explanation

Enterprise risk appetite defines the amount and types of risk the enterprise is prepared to accept in pursuing its objectives. It supplies the decision criteria for assessing the mobile-application initiative's risk, selecting risk responses, and escalating exposures that exceed acceptable limits.

Community Discussion

No comments yet. Be the first to start the discussion!